Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258791 5 警告 アップル
サイバートラスト株式会社
レッドハット
ターボリナックス
CUPS		 - CUPS の cupsd におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3553 2010-07-12 16:41 2009-11-20 Show GitHub Exploit DB Packet Storm
258792 9.3 危険 アップル - Apple Mac OS X の Open Directory における任意のコードを実行される脆弱性 CWE-310
暗号の問題 		CVE-2010-1377 2010-07-9 16:27 2010-06-15 Show GitHub Exploit DB Packet Storm
258793 6.8 警告 アップル - Apple Mac OS X のネットワーク認証における任意のコードを実行される脆弱性 CWE-134
書式文字列の問題 		CVE-2010-1376 2010-07-9 16:25 2010-06-15 Show GitHub Exploit DB Packet Storm
258794 7.2 危険 アップル - Apple Mac OS X のネットワーク認証における権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2010-1375 2010-07-9 16:25 2010-06-15 Show GitHub Exploit DB Packet Storm
258795 7.8 危険 アップル
MIT Kerberos		 - MIT Kerberos 5 の Key Distribution Center におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0283 2010-07-9 16:25 2010-02-16 Show GitHub Exploit DB Packet Storm
258796 4 警告 アップル
MIT Kerberos		 - MIT Kerberos 5 の Key Distribution Center における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1320 2010-07-9 16:25 2010-04-20 Show GitHub Exploit DB Packet Storm
258797 6.8 警告 アップル - Apple Mac OS X の ImageIO における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-0543 2010-07-9 16:24 2010-06-15 Show GitHub Exploit DB Packet Storm
258798 4.3 警告 アップル - Apple Mac OS X の iChat におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1374 2010-07-8 18:27 2010-06-15 Show GitHub Exploit DB Packet Storm
258799 4.3 警告 アップル - Apple Mac OS X のヘルプビューアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1373 2010-07-8 18:27 2010-06-15 Show GitHub Exploit DB Packet Storm
258800 3.3 注意 アップル - Apple Mac OS X の Folder Manager における任意のフォルダを削除される脆弱性 CWE-59
リンク解釈の問題 		CVE-2010-0546 2010-07-8 18:27 2010-06-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197881 4.8 MEDIUM
Network 		drawblog_project drawblog The DrawBlog WordPress plugin through 0.90 does not sanitise or validate some of its settings before outputting them back in the page, leading to an authenticated stored Cross-Site Scripting issue - CVE-2021-24479 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
197882 5.4 MEDIUM
Network 		bookshelf_project bookshelf The Bookshelf WordPress plugin through 2.0.4 does not sanitise or escape its "Paypal email address" setting before outputting it in the page, leading to an authenticated Stored Cross-Site Scripting i… CWE-79
Cross-site Scripting 		CVE-2021-24478 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
197883 6.1 MEDIUM
Network 		migrate_users_project migrate_users The Migrate Users WordPress plugin through 1.0.1 does not sanitise or escape its Delimiter option before outputting in a page, leading to a Stored Cross-Site Scripting issue. Furthermore, the plugin … - CVE-2021-24477 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
197884 5.4 MEDIUM
Network 		steam_group_viewer_project steam_group_viewer The Steam Group Viewer WordPress plugin through 2.1 does not sanitise or escape its "Steam Group Address" settings before outputting it in the page, leading to an authenticated Stored Cross-Site Scri… - CVE-2021-24476 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
197885 6.1 MEDIUM
Network 		awesome_weather_widget_project awesome_weather_widget The Awesome Weather Widget WordPress plugin through 3.0.2 does not sanitize the id parameter of its awesome_weather_refresh AJAX action, leading to an unauthenticated Reflected Cross-Site Scripting (… CWE-79
Cross-site Scripting 		CVE-2021-24474 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
197886 5.4 MEDIUM
Network 		cozmoslabs user_profile_picture The User Profile Picture WordPress plugin before 2.6.0 was affected by an IDOR issue, allowing users with the upload_image capability (by default author and above) to change and delete the profile pi… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2021-24473 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
197887 9.8 CRITICAL
Network 		qantumthemes kentharadio
onair2 		The OnAir2 WordPress theme before 3.9.9.2 and QT KenthaRadio WordPress plugin before 2.0.2 have exposed proxy functionality to unauthenticated users, sending requests to this proxy functionality will… - CVE-2021-24472 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
197888 5.4 MEDIUM
Network 		yada_wiki_project yada_wiki The Yada Wiki WordPress plugin before 3.4.1 did not sanitise, validate or escape the anchor attribute of its shortcode, leading to a Stored Cross-Site Scripting issue CWE-79
Cross-site Scripting 		CVE-2021-24470 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
197889 5.4 MEDIUM
Network 		bozdoz leaflet_map The Leaflet Map WordPress plugin before 3.0.0 does not escape some shortcode attributes before they are used in JavaScript code or HTML, which could allow users with a role as low as Contributors to … CWE-79
Cross-site Scripting 		CVE-2021-24468 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
197890 5.4 MEDIUM
Network 		wpdevart youtube_embed\
_playlist_and_popup 		The YouTube Embed, Playlist and Popup by WpDevArt WordPress plugin before 2.3.9 did not escape, validate or sanitise some of its shortcode options, available to users with a role as low as Contributo… - CVE-2021-24464 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm